Skip to content
Threat Feed
Subscribe

Tag

Vnc

1 brief RSS
high advisory

VNC (Virtual Network Computing) from the Internet

This brief detects unauthorized Virtual Network Computing (VNC) traffic originating from the Internet and targeting internal network segments on TCP ports 5800-5810, indicating potential initial access or backdoor exploitation by threat actors leveraging exposed VNC services.

command-and-control initial-access remote-access network vnc
1r 3t